Lucene search
HistoryApr 21, 2005 - 4:00 a.m.
CVE-2001-1475
ssh
rc4
password authentication
remote attacks
cve-2001-1475
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.6%
SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.
Affected configurations
Node
sshsshMatch1.2.24
ORsshsshMatch1.2.25
ORsshsshMatch1.2.26
ORsshsshMatch1.2.27
ORsshsshMatch1.2.28
ORsshsshMatch1.2.29
ORsshsshMatch1.2.30
ORsshsshMatch1.2.31
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.6%
Related for CVE-2001-1475